Verdict
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
arbieu.com is low-trust and potentially risky.
| What this site appears to be | Arbieu is a Shopify-powered online store featuring multiple product listings, promotional banners (limited-time offers, discounts), shipping and refund policies, a contact form and newsletter signup. Standard ecommerce flow with cart/checkout UI. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 123 reports; shared hosting inflates reports | Clear |
| Domain age | 8 months oldMost scam domains are under a year old | Watch |
| Web archive | Archived since 200326 snapshots | Clear |
| Certificate | Encrypted connectionIssued by YE1 | Noted |
The page as captured
Key findings
- Automated classification: Governance Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2003.
- VirusTotal and Google Safe Browsing had no flags for this domain; its hosting IP carries AbuseIPDB reports below the confidence level TrustSniffer treats as a flag.
Full analysis
Overview
Arbieu is a Shopify-powered online retail storefront presenting consumer product listings, promotional offers, global-shipping messaging, shipping and refund policies, customer-contact options, and a standard cart and checkout flow. Its apparent business model is direct-to-consumer merchandise sales.
Scam/Impersonation Risk
No confirmed phishing, malware, blacklist, brand-impersonation, or conflicting-identity signal was observed, so the available evidence does not establish a scam or impersonation case. The principal concern is operational rather than a confirmed fraud indicator: interactive testing observed hidden forms, suspicious inline scripts, substantial page changes after interaction, and external network activity that was not consistently attributable to trusted destinations. These behaviors warrant caution around checkout and account-related interactions, despite the storefront presenting a conventional retail experience.
- The homepage presents an ecommerce storefront with product listings, promotions, cart functionality, and checkout rather than a financial or investment service.
- Behavioral testing detected hidden forms across all three runs, six suspicious inline scripts, and a maximum post-interaction DOM difference of 1,923.
- Behavioral testing recorded 30 external XHR requests, 22 external POST requests, and 16 non-whitelisted POST requests; no wallet connection, credential-exfiltration form, cloaking, or clipboard-hijacking behavior was detected.
- External reputation checks recorded zero malicious and zero suspicious detections for the evaluated site, while the observed IP-level abuse reports were attributed to shared infrastructure and assigned zero confidence.
Regulatory Verification Notes
Arbieu appears to operate as a consumer-goods retailer, for which the relevant verification focus is merchant identity, consumer-policy enforceability, and payment protections rather than financial licensing. The storefront provides shipping and refund policies, but the available material does not independently establish the legal entity operating the store; no licensing claim or registration number was identified. The domain registration is privately registered through GoDaddy.com, LLC using Registration Private and Domains By Proxy, LLC, which is an administrative limitation rather than an identity contradiction. The historical record shows prior activity associated with the domain, but the current registration record and the present operator should not be treated as independently verified.
- The homepage and policy navigation identify shipping and refund provisions, contact functionality, newsletter signup, and a checkout process.
- The registration record lists GoDaddy.com, LLC as registrar and the registrant as Registration Private through Domains By Proxy, LLC.
- The domain registration record shows creation on 2026-02-03 and expiry on 2027-02-03.
- Historical records contain 26 snapshots spanning 2003–2022, with 20 years tracked.
What to Verify Next
Before a purchase or account interaction, confirm the merchant’s legal name, physical business details, return address, and applicable consumer-protection terms from independent sources. Confirm that the payment method provides dispute or chargeback protection, and verify that the displayed refund and shipping terms remain available through checkout. Where a regulated activity or jurisdiction-specific registration is claimed or expected, check the relevant official registry. Independently confirm the official customer-support channels before sending sensitive order or payment information.
- The storefront exposes shipping and refund policies but the available evidence does not independently identify the operating legal entity.
- The homepage provides a contact form and newsletter signup, while the checkout flow is the point at which payment and order information would be submitted.
- The site is identified as a Shopify-based retail business rather than a verified regulated financial provider.
Summary Verdict
The overall posture is low trust and the operator’s real-world identity remains unverified. No direct impersonation or active malicious-site finding was established, but the combination of limited identity assurance and anomalous interactive behavior does not support treating the storefront as established for consequential transactions.
Infrastructure Integrity
The site is protected by Cloudflare CDN/WAF infrastructure, which provides a mitigating layer against direct exposure but does not validate the merchant’s legitimacy. The observed address was a CDN edge address, and an origin server was not identified in the infrastructure view.
- Served through AS13335, Cloudflare, Inc. (CLOUDFLARENET), with the observed edge address 23.227.38.65.
- TLS uses issuer YE1 with Domain Validation, valid through 2027-01-01.
- Infrastructure resolution identified one CDN edge address and zero likely origin candidates.
Closing Assessment
Proceed only after the merchant identity, consumer terms, support channels, and payment protections have been independently confirmed; higher-value transactions should remain deferred until those checks are satisfactory.
Written analysis generated 2026-10-05 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by behaviour in a sandbox, registration and ownership.
01 Behaviour in a sandbox
- The page contained a form a visitor cannot see.Behaviour in a sandbox
rule:BEHAV_HIDDEN_FORMS - The page carried inline scripts written in a style TrustSniffer treats as suspicious.Behaviour in a sandbox
rule:BEHAV_SUSPICIOUS_INLINE_SCRIPTS - The structure of the page changed sharply while it was loading.Behaviour in a sandbox
rule:BEHAV_DOM_DENSITY_SPIKE - The page rewrote itself after it was interacted with, so what a visitor first sees is not what they end up on.Behaviour in a sandbox
rule:BEHAV_DOM_DIFF_AFTER_INTERACTION
02 Registration and ownership
- The registration record withholds contact details for the operator.Registration and ownership
rule:KF_WHOIS_HIDDEN
Signals weighed against the site
- AbuseIPDB: 123 reports on hosting IP 23.227.38.65 (Shopify, Inc., Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 25% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of arbieu.com.
- The request stayed on arbieu.com. It was not redirected to another domain. Clear
- Registration is published under GoDaddy.com, LLC. Clear
- DNS for this domain is served by domaincontrol.com, across 2 name servers. Noted
- The registration is paid up to 2027-02-03. Noted
- The earliest public archive of this site is from 2003-06-09. Clear
- It is hosted on CLOUDFLARENET, from a server in CA. Noted
Domain intelligence
| Registrar | GoDaddy.com, LLC |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | CA |
| Server IP | 23.227.38.65 |
| Name servers | NS67.DOMAINCONTROL.COM, NS68.DOMAINCONTROL.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 1 |
| Edge IP addresses | 1 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE1 |
| SSL expiry | 2027-01-01 |
| Domain age | 0.67 years (continuous registration) |
| Domain expiry | 2027-02-03 |
| Archive first seen | 2003-06-09 |
| Archive snapshots | 26 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0% confidence, 123 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about arbieu.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.